// For flags

CVE-2015-1265

Google Chrome 43.0 - Certificate MIME Handling Integer Overflow

Severity Score

7.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Múltiples vulnerabilidades no especificadas en Google Chrome anterior a 43.0.2357.65 permiten a atacantes causar una denegación de servicio o posiblemente tener otro impacto a través de vectores desconocidos.

Several security issues were discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass Same Origin Policy restrictions. A use-after-free was discovered in the WebAudio implementation in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed render process. Various other issues were also addressed.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-01-21 CVE Reserved
  • 2015-05-20 CVE Published
  • 2024-08-06 CVE Updated
  • 2024-08-06 First Exploit
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (27)
URL Tag Source
http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html X_refsource_confirm
http://www.securityfocus.com/bid/74727 Vdb Entry
http://www.securitytracker.com/id/1032375 Vdb Entry
https://code.google.com/p/chromium/issues/detail?id=413534 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=445741 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=448057 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=454157 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=458026 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=464642 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=464792 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=465426 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=467372 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=467644 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=474784 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=475070 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=476107 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=484270 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=485412 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=485419 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=489518 X_refsource_confirm
URL Date SRC
https://www.exploit-db.com/exploits/37766 2024-08-06
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html 2023-11-07
http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html 2023-11-07
http://www.debian.org/security/2015/dsa-3267 2023-11-07
https://security.gentoo.org/glsa/201506-04 2023-11-07
https://access.redhat.com/security/cve/CVE-2015-1265 2015-05-25
https://bugzilla.redhat.com/show_bug.cgi?id=1223273 2015-05-25
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 8.0
Search vendor "Debian" for product "Debian Linux" and version "8.0"
-
Affected
Google
Search vendor "Google"
 Chrome
Search vendor "Google" for product "Chrome"
 <= 42.0.2311.152
Search vendor "Google" for product "Chrome" and version " <= 42.0.2311.152"
-
Affected